Question 676
During an internal red team engagement at a software company in Boston, ethical hacker Meera gains access to a developer's workstation. To ensure long-term persistence, she plants a lightweight binary in a hidden directory and configures it to automatically launch every time the system is restarted. Days later, even after the host was rebooted during patching, the binary executed again without requiring user interaction, giving Meera continued access. Which technique most likely enabled this persistence?
Question 677
A financial services firm detects that outbound corporate emails containing sensitive underwriting data were intercepted while transmitted over unsecured channels. To immediately restore confidentiality and ensure authenticity of executive communications, the security operations team deploys a standardized email encryption framework compatible with the organization's Microsoft Outlook environment.
The selected solution must support digital signatures for sender authentication, rely on a public- key infrastructure for secure key exchange, and enable recipients to validate signed messages using certificates issued by trusted authorities.
Identify the email encryption standard that best fulfills these requirements.
The selected solution must support digital signatures for sender authentication, rely on a public- key infrastructure for secure key exchange, and enable recipients to validate signed messages using certificates issued by trusted authorities.
Identify the email encryption standard that best fulfills these requirements.
Question 678
Jacob works as a system administrator in an organization. He wants to extract the source code of a mobile application and disassemble the application to analyze its design flaws. Using this technique, he wants to fix any bugs in the application, discover underlying vulnerabilities, and improve defense strategies against attacks.
What is the technique used by Jacob in the above scenario to improve the security of the mobile application?
What is the technique used by Jacob in the above scenario to improve the security of the mobile application?
Question 679
Allen, a professional pen tester, was hired by xpertTech solutWns to perform an attack simul-ation on the organization's network resources. To perform the attack, he took advantage of the NetBIOS API and targeted the NetBIOS service. B/enumerating NetBIOS, he found that port 139 was open and could see the resources that could be accessed or viewed on a remote system. He came across many NetBIOS codes during enumeration.
identify the NetBIOS code used for obtaining the messenger service running for the logged-in user?
identify the NetBIOS code used for obtaining the messenger service running for the logged-in user?
Question 680
In a cybersecurity research laboratory in Boulder, Colorado, cryptanalyst Dr. Nathan Brooks was analyzing a complex hybrid-encryption scheme used by a government contractor. Instead of writing scripts or relying on command-line utilities, he opened a graphical workspace that allowed him to assemble cryptographic building blocks visually by dragging and connecting them in sequence. The workflow began with frequency analysis, progressed through known-plaintext attacks, and concluded with differential analysis.
The platform executed the complete chain of operations, displayed intermediate results at each step, and allowed components to be modified or extended dynamically.
What cryptanalysis tool was Dr. Brooks most likely using?
The platform executed the complete chain of operations, displayed intermediate results at each step, and allowed components to be modified or extended dynamically.
What cryptanalysis tool was Dr. Brooks most likely using?